Vendor

    StylemixThemes

    107 known vulnerabilities in products by StylemixThemes, 0 of them actively exploited (CISA KEV).

    Key figures

    107

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    27

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in StylemixThemes
    CriticalCVE-2025-4322

    Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

    		9.8
    CriticalCVE-2024-1512

    StylemixThemes MasterStudy LMS: SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2022-0441

    MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

    		9.8
    CriticalCVE-2024-3136

    MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

    also in 1 other product

    		9.8
    HighCVE-2023-4278

    MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation

    		7.5
    CriticalCVE-2026-14900

    StylemixThemes Cost Calculator Builder PRO: Code Injection

    		9.8
    CriticalCVE-2024-43144

    WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2021-36879

    WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability

    		9.8
    CriticalCVE-2023-2834

    BookIt <= 2.3.7 - Authentication Bypass

    also in 1 other product

    		9.8
    CriticalCVE-2024-2411

    MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal

    also in 1 other product

    		9.8
    CriticalCVE-2021-36880

    WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability

    		8.6
    CriticalCVE-2021-4381

    uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route

    also in 1 other product

    		9.8
    CriticalCVE-2021-4370

    uListing <= 1.6.6 - Missing Authorization

    also in 1 other product

    		9.8
    CriticalCVE-2021-4343

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation

    also in 1 other product

    		9.8
    CriticalCVE-2024-37091

    WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

    		9.9
    HighCVE-2025-4800

    MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload

    		8.8
    CriticalCVE-2021-4346

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes

    also in 1 other product

    		9.8
    CriticalCVE-2021-4340

    uListing <= 1.6.6 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2021-4341

    uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX

    also in 1 other product

    		9.8
    HighCVE-2026-14805

    Improper Privilege Management (CVE-2026-14805)

    		8.8
    HighCVE-2025-26986

    WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability

    		8.1
    CriticalCVE-2026-115964

    WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability

    		9.3
    HighCVE-2025-2807

    Stylemix Motors: Missing Authorization

    also in 1 other product

    		8.8
    HighCVE-2022-3989

    Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload

    		8.8
    CriticalCVE-2024-2409

    MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

    also in 1 other product

    		9.8

    All vulnerabilities in search

    Products

    Products by StylemixThemes
    MasterStudy LMS WordPress Plugin190
    Directory Listings WordPress plugin180
    Motors - Car Dealer\, Classifieds \& Listing150
    Consulting Elementor Widgets100
    Cost Calculator Builder100
    StylemixThemes Motors90
    Masterstudy Lms Pro70
    Cost Calculator Builder Pro60
    Masterstudy Elementor Widgets60
    Ulisting (wordpress Plugin)60
    Eroom - Zoom Meetings \& Webinar30